Uh oh!
There was an error while loading. Please reload this page.
Add support for building with shared OpenSSL lacking SSLv3. - #101
Conversation
There was a problem hiding this comment.
Does SSLv23_method() still exist when OPENSSL_NO_SSL3 is defined?
bnoordhuis
commented
Dec 6, 2014
@indutny Can you take a look? You've worked on this most recently. |
indutny
commented
Dec 6, 2014
I wonder if we could forward-port the similar commit from joyent/node: nodejs/node-v0.x-archive@d601c76 |
indutny
commented
Dec 6, 2014
Actually, on a second thought, I don't want it to be done using |
indutny
commented
Dec 6, 2014
@bk2204 could you please take a look at https://github.com/iojs/io.js/blob/v0.12/CONTRIBUTING.md#commit and format your commit message according to it. |
Some distributions disable SSLv3 due to POODLE. In such a case, disable the specific SSLv3 methods and throw an exception, much like the code already does for SSLv2. The SSLv23* code is retained because this is OpenSSL's terminology for "no version in particular".
bk2204
commented
Dec 7, 2014
Sure. Sorry about that. |
bk2204
commented
Dec 7, 2014
As I'm about to explain in my new commit message, SSLv23 is OpenSSL's terminology for "any version of SSL or TLS whatsoever". It's generally what you want to use, since you want it to negotiate the highest protocol supported by both sides. If SSLv3 is disabled, that will be any TLS version. |
indutny
commented
Dec 7, 2014
Looks good. |
Some distributions disable SSLv3 due to POODLE. In such a case, disable the specific SSLv3 methods and throw an exception, much like the code already does for SSLv2. The SSLv23* code is retained because this is OpenSSL's terminology for "no version in particular". Reviewed-By: Fedor Indutny <fedor@indutny.com> PR-URL: #101
indutny
commented
Dec 10, 2014
Landed in ac18ebd, thank you! |
rafeuddaraj
commented
Mar 12, 2026
Please provide more logs |
Some distributions are disabling SSLv3 due to the POODLE attack. For example, the OpenSSL in Debian experimental has removed support for SSLv3_method and friends. If OpenSSL has SSLv3 disabled, throw an exception, just like when SSLv2 is disabled.